Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2026/01/26 11:3 a.m.17 views

Fastify: DoS via Unbounded Memory Allocation in sendWebStream on Fastify v5.7.0+ leads to OOM crash when backpressure is ignored

A vulnerability was discovered in Fastify versions 5.7.0 and later. The issue was in the "sendWebStream" function, which failed to handle TCP backpressure correctly. When a ReadableStream was sent as a response, Fastify continuously pulled data from the stream producer and wrote it to the respons...

3.7CVSS5.9AI score0.00488EPSS
SaveExploits0
Rows per page
Query Builder